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MEMORANDUM FOR: Deputy Director of Security (P§M) 


FROM : 


SUBJECT : 


net. Special Security Center 


APEX 


1. The purpose of this memorandum is to advise the 
Director of Security that basic philosophic and practical 
obstacles exist both within the Agency and the Community 
which must be examined prior to the acceptance of the proposed 
APEX system. 

2. Those objections to APEX--which have been expressed 
repeatedly since October 1978 by such varied authorities as 
NFAC, DIRNSA, national and executive agent Program Managers, 
need not be repeated here. It is sufficient to note that 
they oppose APEX from security, cost, efficiency and manage- 
ment viewpoints. Those objections have not been accommodated 
by the APEX system as proposed and it remains basically 
incompatible with the expressed needs and desires of the 
Community. 

3. From the writer's perspective of having participated 
in several APEX working groups, and having seen objection 
after objection either ignored or "papered over," with no real 
resolution, there is a mounting uneasiness within the Community 
that APEX represents , not an improved managerial scheme for 
SCI, but rather a sinister (to put it bluntly) bureaucratic 
attempt to build an empire at the expense of the security and 
efficiency of current collection systems and their products. 

4. Aside from the inevitable "whitening" of hitherto 
"black" programs which APEX will cause, and the accompanying 
erosion of security, there are more mundane but very real 
side effects which will curtail the Director of Security's 
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authority in the compartmented intelligence field to that 
of an interested bystander. The proposed APEX management 
organization will subsume the following functions now 
performed by various Office of Security components: 


a. Overall management of the 
control system and the development 
policy. (This is now conducted by 

b. Oversight of APEX matters 
outside the Intelligence Community 
participants in the APEX system, wi 
those foreign liaison matters speci 
by the DCI to other NFIB principals 
job of SSC and NFAC/RES) 


APEX security 
of APEX security 
SECOM and SSC.) 

in all organizations 
and with foreign 
th the exception of 
fically delegated 
(Currently the 


c. Responsibility for the development of APEX 
policy and procedural manuals and coordination of 
implementing guidance manuals or procedures developed 
by other organizations participating in the APEX 

K^ ein: <-i/ Both °P er ^tional and product manuals have 
been either produced by or coordinated with SSC.) 

d. Development of the APEX Central Access 

Approval Registry and review and staffing of requests 
for changes and allocations of APEX ceilings and 
access approvals, including administrative access 
approvals. (Assumes and broadens the CIB role while 
impacting directly upon the "must know" prerogative 
of Program Managers.) 6 

e ; Policy direction and guidance for the APEX 
network of AP EX Cont rol Officers, APEX Security 
Officers, and J I Control Officers, including 

111 sernritv inrlnmf + i . ° 


I iunuoi urricers , including 

(1) security indoctrination procedures for briefings 

ASrY de r^ e ^ ngS 0f P ersonnel cleared for access to 
the P ers onnel, physical, and technical 
^ ^ty Programs for the protection of APEX materials, 
and (3) Community standards for document control 
™i U a ing mark rngs, control systems, transmittal" 
p ocedures, and inventory and accountability procedures. 
{.Arrogates an enormous amount of power and authority 
currently held by various Office of Security components. 

n-e-c- a b° ve is meant to point toward lust the internal 

Office of Security impact of APEX. The Commmlty i™^ w 

rejuinn^innnnvr-rj 011111 !; i,npact upon contractors, woiild 
require a more detailed study. 
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. nrn _c Xt should be noted, in passing, that the loss of 
tne CIB function would leave CIA as the only NFIB Agency with 
no independent responsibility, authority and resources for the 
management, administration and control of the accesses it 
sponsors. The Director of Security, CIA would be the only 
senior NFIB security person with no direct control over his 
Agency s recordkeeping operations. Because of sensitive cover 

?Tl? ng n^ entS and the dai ?g er of exposing valuable assets, the 
CIA s Director of Security needs direct authority and control. 

7. What the writer believes is really needed is not 
a completely new system of compartmentation , but rather a 
set of specific guidelines which would permit the maximum 
amount of intelligence product to be decompartmented from the 
currently existing intelligence product systems. It is 

believed that such an approach would be more secure and more 
cost effective. 

a dcy 8 -^ Th ! ?\ r ® c , tor o£ Secu rity should be aware that to accept 
AFLX without full knowledge of its implications, both to his 
Office and the Community, would be a disservice to both. 



Att: Draft APEX Organization Outline 
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Organization for the APEX Special Access Control System 


1- Upon implementation of the APEX system, there will be a 
5 1 ?®? to consolidate a number of Community functions associated 

^S le special access system which currently are being , 
carried out by at least five organizations in the Community They ' 

Committee! ^ ' *** &CUrit ’ r Conmitl:ee > COMIREX, and the SICIOT //:'0 ? j 

. A I 


would 


Mission and Functions (t" 

l. The^central Community organization for the APEX system 
have as lt^r^verahl-mission serving aTfhe DCI 's'staff^an.vv, 

the development of common security and access 
standards for managing and handling compart - 
mented foreign intelligence systems, informa- 
tion, and products. 

the establishment of special access programs 
to control access, distribution, and protection 
of particularly sensitive classified information.' 

3. Jn performing these activities, the APEX organization should 

thS Cha1 ™’ KI SecSSiy 

^ hlch ? stabllsh new, or amend existing. Community 
physical and personnel security policies. o> y 

specific tacSs'T®™ W0Uld be res P° nslble for the following 

a. Overall management of the APEX security control 
system and the development of APEX security policy. 

- Staff for the DCI the reviews and approvals re- 
qurred for programs contained within the APEX system 

including projects approved for the ROYAL dissemination 
s} stem. 

ou*-c?df> APEX matters in all organizations 

outside the Intelligence Community and with foreign par- 

thS system > with th e exception of those 

to Sir 0 " 1 ^ t - er ? S P eeifioally delegated by the DCI 

to other NFIB principals. 
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_d. Responsibility for the development of APEX 
policy and procedural manuals and coordination of 
implementing guidance manuals or procedures developed 
by other organizations participating in the APEX 
system. 

e. Establish and staff the Community mechanism for 
exercising the right of challenge to classification or 
compartmentation of APEX materials arid providing guidance 
on security classification and downgrading and the de- 
compartmentation or sanitization of APEX materials. 

f . Develop Community policy guidance and procedures 
for the release of APEX materials to foreign governments 
and liaison services. 

g. Development of the APEX Central Access Approval 
Registry and review and staffing of requests for changes 
and allocations of APEX ceilings and access approvals, 
including administrative access approvals. 

h. ^ Policy direction and guidance for the APEX network 
of AP nX Control Officers, APEX Security Officers, and ' 

Control Officers, including (1) security indoctrina- 

cion procedures for briefings and debriefings of personnel 
cleared for access to APEX, (2) the personnel, physical, 
and .technical security programs fci^tHe 1 protectiorTof 
.API^ materials-*- and (3) Community standards for document 
control, including markings, control systems, transmittal 
procedures, and inventory and accountability procedures. 

i. Development of policies and procedures for access 
by contractors and consultants to APEX materials. 

Staffing and Resources 

4. The staffing arrangements and resource requirements for this 
new' organization could be achieved as follows: 


a. A number of the responsibilities listed above 
are presently carried out by the COMIREX and SIGINT 
Committees. These responsibilities and the associated 
resources would be removed from the jurisdiction of these 
two Committees and transferred to the APEX organization. 
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b. Others of these responsibilities are presently . 
carried on by the DCI Security Committee, and parts of 
the Office of Security, such as the Cornpartmented Infor- 
mation Branch. These functions and the associated 
resources could also be transferred to the new organization. 

c. The staffing pattern of the new organization should 
be changed radically, compared with the existing staffing 
patterns of the organizations named above. Rather than 
being staffed with a cadre of people who are almost uniquely 
expert in security matters or in the specific disciplines 
of COMINT or Imagery collection, the new organization 
should be staffed on a much more catholic basis. A small 
cadre of Security, Imagery, and SIGINT specialists is 
necessary, but the remainder of the staff should include 
representatives from: 

-- other collection activities, e.g., NSA, 

Navy. 

-- other processing organizations, e.g., 

NPIC, OIA. 

-- user organizations, e.g., NFAC, DIA 
Production, and INR. 

5. •-To preserve the momentum and thrust of the program, the initial 
chief of the organization should be from the user community. He should 
also be of sufficient status --supergrade level--to deal with senior 
members of the Community. 

6. The new organization should be viewed clearly as a Community 
organization reporting to the DCI through his Deputy for Community 
Support. Each of the principal members of the NFIB should be required 
to detail officers to serve rotational tours with this organization. 

7. The functions of this organization would require an estimated 
25 to 28 positions. This would include the 12 positions in the Compart - 
mented Information Branch of CIA's Office of Security which would move 
intact to the new organization. One staffing arrangement for the organiza- 
tion might be as follows: 

Office of the Chief -- Chief, Deputy and two secretaries. 

The Deputy w'ould also ha ve direc t 
responsibilities for the | 
dissemination system 
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Security Staff 


Two -three professionals and one 
secretary. 


Imagery Staff 


Two- three professionals and one 
secretary. 


Signals Staff 


Two -three professionals and one 
secretary. 


APEX Control Access -- Two professionals, two technical 
Approval Registry and eight clerical employees 


S. Based on present commitments (positions or man-year equivalents) 
to activities similar to those to be performed by the new organization, 

20 of the required 28 positions are immediately identifiable: 


COMIREX 


3 positions 


SIGINT Committee -- 2 positions 

Compartment at ion -- 3 positions 

Branch, DC I Security 

Committee 

Compartmented Infor- -- 12 positions 

nation Branch, Office 
"'Of Security, CIA 

9. As a matter of Community concern, other Community members most 
involved in the APEX program should be asked to provide positions for 
the remaining staffing requirement of eight positions. NS4., for example, 
could be asked to underwrite two positions and the following to under- 
write, one position— SAFSS, NPIC, Navy, CIA/DDS$T/0S0, CIA/NFAC, and DIA. 
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